Security Audit

jimliu/baoyu-skills:skills/baoyu-youtube-transcript

github.com/jimliu/baoyu-skills

AI SkillCommit 6b7a2e417500

TRUSTED

Scanned 24 days ago

Critical

Immediate action required

High

Priority fixes suggested

Medium

Best practices review

Low

Acknowledged / Tracked

Trust Assessment

jimliu/baoyu-skills:skills/baoyu-youtube-transcript received a trust score of 85/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.

SkillShield's automated analysis identified 1 finding: 0 critical, 1 high, 0 medium, and 0 low severity. Key findings include Argument Injection in YouTube Video ID Parsing.

The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.

Last analyzed on August 6, 2026 (commit 6b7a2e41). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.

Layer Breakdown

Manifest Analysis

100%

Static Code Analysis

100%

Dependency Graph

100%

LLM Behavioral Safety

85%

Behavioral Risk Signals

Network Access

1 finding

Shell Execution

1 finding

Dynamic Code

1 finding

Security Findings1

Severity	Finding	Layer	Location
HIGH	Argument Injection in YouTube Video ID Parsing The `extractVideoId` function in `scripts/shared.ts` falls back to returning the raw input string if it does not match any of the expected YouTube URL or video ID patterns. This unvalidated input is subsequently passed to external command-line tools like `yt-dlp` during fallback execution. An attacker can supply a malicious input starting with dashes (e.g., `--exec ...`) to perform argument injection, potentially leading to arbitrary command execution via `yt-dlp`'s command execution flags. Validate that the extracted video ID strictly conforms to the expected 11-character alphanumeric format (plus underscores and dashes) before passing it to any external processes or APIs. If the input does not match any valid YouTube URL or video ID pattern, reject it instead of returning it raw. Additionally, when invoking `yt-dlp` via `spawnSync`, use the `--` argument separator to ensure that any subsequent arguments are treated strictly as positional arguments (video URLs/IDs) rather than options.	LLM	scripts/shared.ts:3

Scan History

Embed Code

[![SkillShield](https://skillshield.io/api/v1/badge/4292d1455c114a9b.svg)](https://skillshield.io/report/4292d1455c114a9b)